Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DD3BE51AE4AC11EF86681673C4F9AE02.roa
File:                     DD3BE51AE4AC11EF86681673C4F9AE02.roa (raw, json)
Hash identifier:          rXBGNx/GX6ao6Kn2YO0eicsMyoKr6cbQQqw1DELi40I=
Subject key identifier:   DD:69:74:E3:1F:3F:ED:A7:45:38:10:98:D1:C3:46:EA:C7:31:5D:9A
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3830
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DD3BE51AE4AC11EF86681673C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:15:30 +0000
ROA not before:           Thu 08 Oct 2026 15:15:30 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        175.29.0.0/22 maxlen: 24
                          175.29.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 14:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14384 (0x3830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:15:30 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b392-9760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:7e:71:e3:cc:e8:33:9d:ad:b4:cb:b2:91:
                    df:a4:30:df:b3:10:0b:32:8c:2b:c9:22:3f:61:31:
                    05:b9:33:32:4e:27:18:ef:33:de:86:32:59:83:79:
                    a0:d6:34:ef:88:0b:a0:41:18:42:d9:e4:1b:e2:62:
                    9d:ae:51:48:51:30:4a:d8:a5:d2:bf:df:4a:99:f1:
                    1c:a6:c5:1c:6c:80:8d:97:53:b7:24:8f:44:76:84:
                    ec:69:9a:18:b3:01:7c:be:36:36:ef:5d:59:56:c8:
                    7f:59:a6:13:b0:4e:21:b8:e7:c6:6f:c6:d0:dc:b8:
                    df:d1:63:17:cd:5b:cd:71:9a:d8:89:c6:05:8a:6c:
                    25:86:6c:74:f4:49:d4:86:b1:48:0f:5c:48:d9:aa:
                    90:e7:08:12:f5:bd:bc:ec:85:02:46:ba:ef:34:3b:
                    2e:88:18:24:79:1a:0f:0b:00:19:27:38:20:7e:66:
                    06:63:6b:0a:ae:47:00:95:06:1b:d4:70:ea:da:77:
                    6e:7e:3a:76:5b:b5:79:ee:65:3b:82:4b:9b:ff:f1:
                    e6:db:84:06:5b:a9:72:1b:30:66:1e:7a:24:80:87:
                    18:5e:3a:c2:33:e1:9a:7e:f4:f9:08:c3:7a:d0:5f:
                    2f:4a:71:ee:ab:da:b0:fe:b6:02:36:93:50:3f:eb:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:74:E3:1F:3F:ED:A7:45:38:10:98:D1:C3:46:EA:C7:31:5D:9A
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DD3BE51AE4AC11EF86681673C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.0.0/22
                  175.29.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:d2:ae:af:9d:f9:93:f1:7f:93:4a:83:4f:25:dc:51:98:
         99:8b:98:50:57:8b:a6:2f:83:65:48:3e:2a:02:dd:de:40:72:
         04:4f:60:d4:67:59:98:19:63:e6:65:17:ba:bd:64:97:2f:bd:
         58:48:1e:7c:77:2d:5a:29:ca:5f:77:d7:b3:af:cd:89:ac:29:
         a7:c6:35:e2:63:93:13:38:6a:44:af:5c:7e:0b:f1:65:40:5f:
         86:d1:25:ba:91:d8:94:b7:09:f5:b8:c8:91:be:48:8c:c2:49:
         9c:98:53:27:f6:f5:6c:9d:13:fb:c8:ed:c3:c5:84:71:df:2e:
         98:12:3d:6f:97:86:37:d3:84:e3:9c:76:7b:f5:fe:29:02:f1:
         e0:0a:a1:c3:94:93:c4:f3:d0:6d:74:62:f3:3b:f0:3a:d5:79:
         2f:fa:e0:b6:3c:c8:6e:4c:d6:3c:91:13:0a:0c:ad:ff:84:ce:
         7b:fc:9d:1b:64:5c:e5:3d:86:a6:2c:3c:03:1e:42:af:b5:dc:
         e7:1d:7a:9a:b7:0c:6d:ee:05:81:f2:ee:f0:49:ab:7d:83:4d:
         2f:e2:d6:98:6f:2a:7a:a3:96:5a:21:0e:c7:50:99:f8:9d:06:
         29:3f:7c:42:82:3c:f5:a5:18:fa:f2:eb:10:34:93:2b:c8:d8:
         c8:75:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:12:37 2026 by rpki-client